> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Iwatani: a forum invitation was sent with recipients visible, exposing 2,889 email addresses to each other

An invitation to its 15th hydrogen energy forum went out in "To", so 2,889 email addresses were visible to all recipients.

Disclosed

2021-12-29

Organizations involved

1

Leaked or at risk

2.9K

2,889

Downtime

Unknown

What happened

  1. At 2:40 p.m. it sent an invitation to attendees of the previous forum. A staff report revealed it had been sent in "To" instead of "BCC". At 3:50 p.m. it sent an apology and a request to delete the email. [1] [2]

  2. It announced the case. [1] [2]

Impact

The email addresses sent in a visible form numbered 2,889; no other data such as addresses or phone numbers was included. [1] [2]

Timeline

  1. Detected 2021-12-28
  2. Disclosed 2021-12-29
  3. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]メール誤送信による個人情報漏えいについてのお詫びIwatani Corporation · 2021-12-29
  2. [2][News]「第15回 イワタニ水素エネルギーフォーラム」案内を誤送信、2,889件のメールアドレスが流出ScanNetSecurity · 2022-01-12 08:05